Privacy Policy

1. Information we collect

• Website and campaign data: IP address, approximate country, browser and device information, pages viewed, actions taken, referring site, campaign parameters, and advertising click identifiers such as fbclid when they are present.
• Purchase information: your email address, name, billing country, order amount, currency, transaction references, license key, and limited payment details made available to us by Stripe. We do not receive your full card number.
• License activation information: license identifier, a one-way hash of the device identifier, an optional device label, activation time, and last-seen time. The raw device identifier does not leave your computer.
• Support correspondence: messages you send to info@delfibot.com and our replies.

We do not receive your wallet's private key, wallet address, trading history, forecasts, positions, or P&L. Those remain on your computer or within services you connect to directly, such as Polymarket and your selected forecasting provider.

2. How we use information

• Process purchases, issue licenses, deliver receipts, and provide support.
• Activate one licensed device at a time and enforce refunds, revocations, and fraud controls.
• Measure website performance, checkout completion, and advertising results.
• Maintain accounting, tax, security, and legal records.

We process purchase and license data to perform our contract with you. We process accounting, security, and fraud data to meet legal obligations and our legitimate interests. We use analytics and advertising technologies with consent where applicable, or under another lawful basis available in your jurisdiction. We do not sell your personal data.

3. Wallets and private keys

The desktop app stores your Polymarket private key in a local file restricted to your operating-system user account. Delfi reads the key inside the desktop process when it needs to sign a trade. The key is not transmitted to us, and we cannot access your wallet or funds.

4. Analytics and advertising measurement

We use Google Analytics 4, Meta Pixel, Microsoft Clarity, and Vercel Speed Insights to understand use of the website and measure the path from an advertisement to a purchase. Where prior consent is required, these tools load only after you accept analytics and advertising cookies. Elsewhere they may load by default, but you can disable them at any time on our Cookies Policy page.

When Meta measurement is allowed, a completed purchase may also be sent to Meta through its Conversions API. The event can include the order value and currency, campaign identifiers, browser identifiers, IP address, user agent, and a cryptographic hash of the purchase email. We use the same order identifier for browser and server events so Meta can count the purchase once.

5. Cookies and local storage

The marketing site uses browser storage to remember your consent choice and retain campaign attribution within the current browser tab until checkout. Analytics and advertising providers may set cookies when their tools are enabled. Stripe may use cookies and similar technologies in the embedded checkout for payment processing, security, and fraud prevention. Details and controls are in our Cookies Policy.

6. Service providers

We share only the information needed for each provider to perform its role:

• Stripe: payment processing, checkout, and transaction records.
• Supabase: hosted database for purchase, license, and activation records.
• Resend: delivery of license and transactional emails.
• Zoho Books: invoices, refunds, and accounting records.
• Vercel: website hosting, request logs, and performance measurement.
• Google, Meta, and Microsoft: analytics, advertising measurement, and site-use insights when enabled.

These providers process information under their own terms and privacy notices as well as their agreements with us.

7. Data retention

We retain purchase, invoice, license, and transaction records while the license is active and for up to seven years where needed for financial and legal obligations. Device activation data is retained while needed to operate the license. Support messages are retained while relevant to the request and our legal obligations. Website attribution kept in session storage is removed when the browser tab session ends. Analytics providers retain data according to the settings in our provider accounts.

8. International transfers

Some providers process information outside the United Kingdom or your country. Where required, we rely on recognised transfer safeguards, including adequacy regulations and approved contractual clauses.

9. Your rights

Depending on your jurisdiction, you may have the right to:

• Request access to or a copy of your personal data.
• Request correction or deletion of your data.
• Restrict or object to certain processing.
• Request data portability.
• Withdraw consent at any time without affecting earlier lawful processing.
• Complain to your local data protection authority.

Send requests to info@delfibot.com. We normally respond within one month.

10. Security

Website and purchase information is transmitted over TLS. Our hosting, payment, email, accounting, and database providers apply their own access controls and encryption. On your computer, Delfi's local secrets file is restricted to your operating-system user account. Anyone who can access that account or device may be able to access the file, so you must keep the device and account secure.

11. Changes

We may update this policy when our product, providers, or legal obligations change. Material changes will be communicated where required by law. The latest revision date appears at the top of this page.

12. Data controller and contact

The data controller is WLDK Limited, company number 16182403, with its registered office at Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom.

Privacy questions can be sent to info@delfibot.com. UK users may complain to the Information Commissioner's Office. EU users may complain to their local supervisory authority.